CIA Part 2 Study Plan: 12-Week Guide for Working Professionals
An 80–120 hour blueprint to master Internal Audit Engagement using Surgent's adaptive learning platform and modern AI study tools.
CIA Part 2 — Internal Audit Engagement — tests your ability to plan and execute real audit assignments. With 100 MCQs in 2 hours and heavy scenario-based questions, you'll need 80–120 hours over 8–12 weeks. Spend 50% of your study time on Engagement Planning (the largest domain). The answer to almost every scenario question is: what do the IIA Standards say the auditor should do here?
Is CIA Part 2 Hard?
| Exam | Difficulty |
|---|---|
| CIA Part 1 | Medium |
| CIA Part 2 | Medium |
| CIA Part 3 | Hardest |
CIA Part 2 is often considered the most practical CIA exam. Auditors usually find it easier than Part 1 because it focuses on real engagement scenarios rather than standards memorisation. If you have audit work experience, much of Part 2 will feel familiar — you are essentially being tested on what you already do on the job, but through the lens of the IIA Standards. Candidates without audit experience can still pass comfortably by training themselves to think through the engagement lifecycle step by step. See the full CIA Part 1 vs Part 2 vs Part 3 comparison for a detailed difficulty breakdown.
Questions People Ask Eduyush About CIA Part 2
These are the questions Eduyush counsellors get asked most often about CIA Part 2. The answers are here.
| Question | Short Answer |
|---|---|
| Is CIA Part 2 easier than Part 1? | Generally yes — it's more practical and scenario-based. Auditors with experience often find it more intuitive. |
| How many hours should I study? | 80–120 hours depending on background. See the study hours by background table below. |
| What is the hardest topic? | Sampling and statistical methods within Domain 2 trips up most candidates. Engagement Planning (Domain 1) is the largest domain — hardest to fully master. |
| How many MCQs should I practise? | 800–1,000 minimum. See the CIA MCQ practice guide. |
| Can I pass in 8 weeks? | Yes, at 12–15 hrs/week if you recently passed Part 1. Tighter if you're starting cold. |
| Is Surgent enough? | Yes — Surgent's question bank, ReadyScore, and reference guide cover the full syllabus. Most candidates do not need additional materials. |
| What ReadyScore predicts a pass? | 80%+ overall ReadyScore is a reliable indicator. See the Surgent ReadyScore guide. |
| Do I need audit experience? | No — you need audit knowledge. Experience helps, but the exam tests IIA Standards, not job history. |
- CIA Part 2 has 100 MCQs in 2 hours — 72 seconds per question
- Three domains: Engagement Planning (50%), Information Gathering & Evaluation (40%), Supervision & Communication (10%)
- Heavily scenario-based — expect practical application questions, not definitions
- Recommended study time: 80–120 hours over 8–12 weeks (10–15 hrs/week)
- Protect your first 90 hours: Domain 1 (50%) + Domain 2 (40%) = 90% of the exam
How Long Does CIA Part 2 Take to Prepare?
| Weekly Study Time | Completion Timeline | Best For |
|---|---|---|
| 5 hrs/week | 4–5 months | Very tight schedules |
| 8 hrs/week | 3–4 months | Busy professionals (40–50 min/day) |
| 10 hrs/week | 2–3 months ✓ This Plan | Working professionals with weekends |
| 15 hrs/week | 6–8 weeks | Study leave or sabbatical |
CIA Part 2 Study Hours by Background
Your starting point determines how many hours you need — not just how hard you work.
| Background | Recommended Study Hours |
|---|---|
| Internal Auditor | 80–100 hrs |
| CA / Chartered Accountant | 90–110 hrs |
| CPA | 90–110 hrs |
| Risk Professional | 100–120 hrs |
| New to Audit | 120–150 hrs |
This plan targets 10 hrs/week: ~40–45 min on weekdays + 2–4 hrs on weekends = 100 hours over 10–12 weeks. If you passed Part 1 recently, your knowledge is still fresh — that directly reduces hours needed. Surgent's adaptive engine compounds your efficiency from day one.
Why Candidates Fail CIA Part 2
Understanding how people fail is the clearest guide to how to pass. These five failure modes account for the majority of repeat sitters.
Passing CIA Part 2 while maintaining a full-time job comes down to one thing: smart study strategy, not total hours logged. Surgent's own success data confirms that candidates who pass don't read reference guides cover-to-cover. They master MCQs, analyse mistakes, and use AI tools to close gaps efficiently. This guide gives you a proven 10–12 week plan structured around the A.U.D.I.T. Method.
The A.U.D.I.T. Method
CIA Part 2 Domain Breakdown
| Domain | Focus Area | Exam Weight | Study Hours |
|---|---|---|---|
| Domain 1 | Engagement Planning | 50% | 50 hrs |
| Domain 2 | Information Gathering, Analysis & Evaluation | 40% | 40 hrs |
| Domain 3 | Engagement Supervision & Communication | 10% | 10 hrs |
Protect your first 90 hours. Domain 1 (50%) + Domain 2 (40%) = 90% of the exam. Domain 3 is only 10% — important, but never at the expense of the first two. Candidates who spread time evenly fail disproportionately on planning and evidence questions.
Domain 1 (Engagement Planning) carries half the exam. If work gets hectic mid-study and you must compress, compress Domain 3 — never Domain 1 or 2.
Most Tested CIA Part 2 Topics
Use this to guide where you spend your MCQ practice time. High-importance topics appear in multiple questions on the actual exam.
| Topic | Domain | Importance |
|---|---|---|
| Engagement Objectives | Domain 1 | Very High |
| Scope & Scope Limitations | Domain 1 | Very High |
| Risk Assessment | Domain 1 | Very High |
| Audit Work Programmes | Domain 1 | Very High |
| Evidence Reliability & Sufficiency | Domain 2 | High |
| Sampling Methods | Domain 2 | High |
| Working Papers & Documentation | Domain 2 | High |
| Engagement Reporting | Domain 3 | Medium |
Domain 1: Engagement Planning (50%)
Engagement Planning is where the audit journey begins. The exam tests:
- Defining engagement objectives and scope
- Identifying evaluation criteria and assessing their adequacy
- Performing risk assessments for the engagement
- Developing audit work programmes and control testing procedures
- Allocating engagement resources (staff, time, budget)
- Special topics: cybersecurity risks, IT controls, business continuity, accounting processes
Every Domain 1 question asks: "What do I need to know before starting fieldwork?" Train yourself on the planning sequence: Understand the business → Identify risks → Set objectives → Design procedures. Questions follow this logic — so should your thinking.
Domain 2: Information Gathering, Analysis & Evaluation (40%)
Once planning is done, auditors gather evidence. This domain tests:
- Audit evidence techniques (interviews, observation, document review, data analytics)
- Types of evidence (physical, documentary, testimonial, analytical) and when each is appropriate
- Sufficiency, relevance, and reliability of evidence
- Sampling techniques (statistical vs. non-statistical)
- Working paper standards and documentation
- Supervision and quality review of fieldwork
Domain 2 questions ask: "What's the best audit procedure here?" The answer depends on which evidence type is most appropriate, reliable, and efficient for that specific risk. Know the strengths and limitations of each method before attempting scenario MCQs.
Domain 3: Engagement Supervision & Communication (10%)
The engagement ends with reporting. This domain tests:
- Preparing interim and final engagement communications
- Communicating engagement observations and recommendations
- Determining the tone and content of audit findings
- Monitoring management action plans and follow-up
- Required elements of a final audit report (per IIA Standards)
Domain 3 is only 10% of the exam, but it's high-scoring if you know the IIA Standards on communication. Memorise the required elements of a final engagement communication. The question type most commonly asks: how do you phrase a finding professionally without being accusatory?
Surgent CIA Review is built for people who have a job and a life.
Adaptive ReadyScore tells you exactly what to study next — so every 40-minute session counts. Used by thousands of working professionals to pass all three CIA parts.
View Surgent CIA Course →Using AI Tools with Surgent
The smartest CIA candidates combine Surgent's adaptive platform with AI tools to cut wasted study time. The key is keeping both open simultaneously.
Open Surgent inside Comet browser → Do 15–20 MCQs → For any wrong answer: click Comet's assistant panel (it already sees your question on-screen) → Ask "Why is this answer wrong?" or "Give me more examples of this topic" → Comet responds in context → Return to next question. No tab-switching, no copy-pasting.
Comet Browser has a built-in AI assistant that reads the page you're on. Open Surgent inside Comet and the assistant sees the question, answer choices, and explanations — giving contextual answers without breaking your focus.
Claude AI (standalone) works as your on-demand audit tutor. Paste a question you got wrong and ask for a simpler explanation, a real-life example, or a comparison table.
Power prompt for Claude: "I'm studying CIA Part 2 and got this question wrong: [paste question]. Explain the audit principle simply, tell me why each wrong answer is wrong, and give me a memory hook." One mistake becomes three learning moments.
The 12-Week Study Plan
Click any week below to expand the full schedule — topics, daily breakdown, ReadyScore targets, and milestones.
Weeks 1–2
Foundation: Scope & Objectives
14 hrs
Topics to Cover
- Engagement definition (assurance vs. advisory)
- Defining engagement objectives clearly
- Setting audit scope and documenting scope limitations
- Stakeholder requests: managing and documenting changes
- IIA Standard 2110 — Determining Engagement Objectives and Scope
- 10 min: Watch Surgent intro video on Domain 1
- 25 min: 15–20 MCQs on objectives & scope
- 5 min: Use Comet assistant for wrong answers
- Sat 90 min: 30–40 MCQs on scope scenarios
- Sun 60 min: Wrong-answer review + reference guide dips
- +30 min: Use Claude to quiz yourself on objectives vs. scope
- Can distinguish assurance from advisory engagements
- Understand what makes engagement objectives clear and measurable
- Know how to document and respond to scope limitations
Weeks 3–5
Evaluation Criteria & Risk Assessment
18 hrs
Topics to Cover
- Identifying evaluation criteria (standards, policies, regulations)
- Assessing adequacy of criteria
- Detailed risk assessment for engagements
- Recognising pervasive risks and emerging risks
- IIA Standards 2120 & 2150 deep-dive
- 25–30 MCQs on criteria and risk
- Ask Comet: "What criteria would apply here?"
- Sat: 40–50 MCQs; risk prioritisation scenarios
- Sun: Deep-dive on wrong answers
- Know sources of evaluation criteria and how to assess adequacy
- Can identify pervasive risks vs. activity-specific risks
- Understand impact of organisational change on audit risk
Weeks 6–7
Audit Work Programmes & Procedures
18 hrs
Topics to Cover
- Designing engagement work programmes
- Evaluating control design, effectiveness, and efficiency
- Testing methodologies for key business functions
- Resource planning (financial, human, technological)
- IIA Standards 2160 & 2170
- 25–30 MCQs on work programmes
- Comet: "What audit procedures fit this risk?"
- Sat: 40–50 scenario-based MCQs
- Sun: Deep-dive + resource allocation cases
- Can design appropriate audit procedures for a given risk
- Understand control testing methodologies
- Know how to allocate engagement resources
Weeks 8–9
Evidence Gathering & Analysis (Domain 2)
32 hrs
Topics to Cover
- Types of audit evidence and appropriateness
- Sufficiency, relevance, reliability criteria
- Statistical vs. non-statistical sampling
- Working paper standards and documentation
- Data analytics and CAATTs
- IIA Standards 2200 series
- 25–30 MCQs on evidence and sampling
- Use Comet for evidence type questions
- Sat 2 hrs: 40–50 MCQs on fieldwork
- Sun 2 hrs: Sampling scenarios + CAATT examples
- Know which evidence type is best for each audit objective
- Understand sampling methods and when to use each
- Know working paper standards and documentation requirements
Weeks 10–11
Communication & Supervision (Domain 3)
12 hrs
Topics to Cover
- Preparing engagement observations and recommendations
- Elements of final engagement communications
- Tone, professionalism, and constructive feedback
- Monitoring management action plans and follow-up
- IIA Standards 2400 series
- 20–25 MCQs on communications
- Focus on tone and professionalism questions
- Sat 75 min: 20–25 MCQs
- Sun 60 min: Follow-up scenarios
- Know required elements of a final engagement communication
- Understand how to communicate findings professionally
- Know follow-up procedures and monitoring timelines
Week 12
Full-Length Practice Exams & Final Review
10–12 hrs
Real conditions only: no reference guide, full timer, no pausing. These final sessions separate confident candidates from uncertain ones.
Saturday — Full-Length Mock
- 2-hour timed exam (100 MCQs, no reference guide)
- Review all answers within 24 hours including correct ones
Sunday — Post-Exam Analysis
- Which domains scored lowest? Were there time management issues?
- Let ReadyScore direct remaining weak-area review
- Light review only on final days — avoid burnout before exam
- Overall ReadyScore: 80%+
- Domain 1: 80%+ | Domain 2: 75%+ | Domain 3: 80%+
Daily Study Protocol for Working Professionals
Consistency beats volume. These protocols extract maximum learning from limited time.
- 5 min: Open Surgent. Review yesterday's errors.
- 25 min: 15–25 MCQs on current topic. No reference guide.
- 10 min: Comet assistant for wrong answers — no tab-switching.
- 5 min: Note tomorrow's focus. Screenshot ReadyScore.
- 10 min: Weekly review — what was hardest?
- 90 min: 40–50 MCQs. Read every explanation.
- 45 min: Scenario deep-dive or reference guide on this week's gaps.
- 15 min: Claude prompt for memory aids or concept clarification.
Leave a comment